Техническая информация
- '%TEMP%\busedos.exe'
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\icanhazip[1]
- %TEMP%\busedos.exe
- %TEMP%\WERD805.tmp
- '18#.#55.168.97':443
- '94.##4.107.172':443
- '79.##1.42.247':443
- '18#.#55.236.184':443
- '18#.#55.249.28':443
- '17#.#22.250.35':443
- '93.#85.4.90':13248
- 'ic###azip.com':80
- '19#.#06.166.22':443
- '95.##3.130.63':443
- '96.##.99.215':443
- http://ic###azip.com/
- DNS ASK ic###azip.com
- ClassName: 'BSWindow' WindowName: 'ACClass'